ISO 26262 concepts, explainedKnow the concept. Make the connection.
Turn ISO 26262 terminology into reasoning you can use. Explore clear explanations, visual examples and practical decisions, one safety topic at a time.
Search titles and summaries, filter by plan, or jump to a phase. Each guide has a public overview you can read before registering.
Search & browse the libraryHARA, FMEDA, SEooC, software safety, SOTIF…
Parts 1, 2 and 8
Foundations
Vocabulary, lifecycle, roles and the management system everything else assumes.
Confirmation MeasuresLearn when reviews, audits, and assessments require higher independence based on ASIL. Covers functional safety assessment (FSA) planning, TCL assessment, finding management, and confirmation evidence integration.Expert plan pricing12 chapters
Development Interface AgreementLearn how to define clear safety responsibilities and evidence exchange between OEM and supplier per ISO 26262-8. Covers DIA content structure, RASIC matrix, lifecycle from initiation to production, and assessment coordination.Expert plan pricing14 chapters
Faults and FailuresLearn the complete fault taxonomy: single-point, residual, latent, and safe faults plus transient vs. permanent classifications. Covers FTTI analysis, dependent failure analysis, FMEDA calculations, and the bathtub curve.Pro plan pricingExpert plan pricing16 chapters
Functional Safety Roles & Career PathsUnderstand the three core ISO 26262 positions: the Engineer who builds safety, the Manager who plans and owns the safety case, and the Assessor who independently confirms it. Plus confirmation measures, independence levels and a career roadmap.Expert plan pricing8 chapters
IEC 61508: Functional Safety of E/E/PE SystemsThe basic safety publication behind the whole functional safety family: the EUC and the risk gap that sizes a SIL, the sixteen-phase safety lifecycle, PFDavg and PFH across three demand modes, the architectural constraints of Route 1H and Route 2H, the random hardware arithmetic, systematic capability, Part 3 software rigor, and why ASIL D does not equal SIL 3.Expert plan pricing13 chapters
ISO 26262 vs Other Safety StandardsLearn how ISO 26262 compares with IEC 61508, DO-178C, EN50128, ISO 13849, and SOTIF across key dimensions. Covers risk classification differences, lifecycle approaches, V&V strategies, and multi-standard compliance.Pro plan pricingExpert plan pricing
Safety Culture & CompetenceISO 26262 Part 2 made operational: observable safety culture indicators, building the safety organization, independence of confirmation measures, provable competence records, anomaly handling, and how to measure culture and make the safety-first commitment real.Expert plan pricing12 chapters
Safety Plan DevelopmentLearn how to plan all safety activities, roles, milestones, and work products across the ISO 26262 lifecycle. Includes Gantt chart visualization, tailoring guidelines, and audit readiness strategies.Expert plan pricing9 chapters
The Automotive Safety Standards MapISO 26262 covers hazards caused by an E/E system doing the wrong thing. Sensor limits, attackers and learned models each needed a document of their own. This is the map of how all of them fit together.Expert plan pricing16 chapters
Part 3
Concept phase
From the item definition to safety goals, ASILs and the functional safety concept.
2h of videoASIL DecompositionLearn valid decomposition schemes to allocate lower ASILs to redundant elements while maintaining safety integrity. Covers independence criteria, a steer-by-wire case study, FTA integration, and argumentation strategies.Pro plan pricingExpert plan pricing12 chapters
E-Gas (Electronic Throttle Control) ConceptLearn the German automotive reference architecture for electronic throttle control with monitoring and fallback modes. Covers redundancy patterns, plausibility checks, limp-home modes, and how E-Gas principles apply to modern ECUs.Pro plan pricingExpert plan pricing14 chapters
2h of videoFunctional Safety ConceptLearn how to derive safety goals, define safe states, and build functional safety requirements from HARA results. Covers fault reactions, degradation strategies, operating modes, and architecture diagrams with interactive videos.Free plan pricingPro plan pricingExpert plan pricing13 chapters
2h 30m of videoHazard Analysis & Risk Assessment (HARA)Learn how to identify vehicle-level hazards and assign ASIL ratings through Severity, Exposure, and Controllability assessment. Covers operational situations, FTTI concepts, and advanced topics for ADAS and distributed systems.Pro plan pricingExpert plan pricing14 chapters
Item Definition & Concept-Phase InitiationGet the first ISO 26262-3 step right: define the item boundary, interfaces, operating modes, and assumptions of use that HARA, safety goals, and the whole safety case inherit from the concept phase.Expert plan pricing10 chapters
Safety Design Decisions Across Vehicle DomainsNine automotive domains walk the exact same ISO 26262 Part 3-6 chain - Item Definition, HARA, FSC, TSC, HSI, hardware and software - yet arrive at radically different technical answers. See why a traction inverter, a brake ECU and a cockpit display controller end up nothing alike.Expert plan pricing11 chapters
Safety-Related Timing: FTTI, FDTI & FHTITreat time as a safety property. Learn the ISO 26262 fault-handling intervals (FTTI, FDTI, FRTI, FHTI), how diagnostic test rate sets detection latency, and how to budget detection and reaction so a fault is controlled before a hazardous event.Expert plan pricing10 chapters
Part 4
System level
Technical safety concept, architecture, interfaces and the mechanisms that make a system safe.
Boot & Reset SafetyThe transitions every ECU makes and nobody watches: the boot chain from power-on reset to application start, reset taxonomies and escalation ladders, startup self-tests, watchdogs, reset storms, brownout recovery and safe shutdown.Expert plan pricing14 chapters
Calibration & Parameter SafetyThe same binary, a thousand behaviors: configuration data vs calibration data, ISO 26262-6 Annex C requirements, A2L and XCP workflows, CRC and plausibility protection in the ECU, dataset release, variant coding risks and tool confidence.Expert plan pricing12 chapters
Diagnostics & Remote Service SafetyThe diagnostic connector is a command path, not a data port: UDS, DoIP and DTC mechanics, the shift to service-oriented diagnostics on vehicle computers, which read, write, routine and mode actions can violate a safety goal, and the vehicle-side gating, bounding, containment and evidence mechanisms that keep the path safe.Expert plan pricing13 chapters
EMC & Transient SafetyThe environment as a fault source: how EMI, ESD, load dump and coupled transients become random faults, the ISO 7637 / ISO 11452 / ISO 10605 standards map, immunity as a safety argument, and filtering, shielding and plausibility as safety measures.Expert plan pricing13 chapters
Freedom from Interference (FFI)Learn how to ensure elements of different ASILs do not interfere through temporal, spatial, and data partitioning. Covers MPUs, hypervisors, bus monitoring, multi-core strategies, and evidence generation for assessments.Expert plan pricing12 chapters
HMI & Display SafetyThe driver as a safety mechanism and the pixels as its wiring: controllability credit, warning timing inside the FTTI, tell-tale integrity, and the mechanisms that keep digital clusters and head-up displays honest.Expert plan pricing12 chapters
Hypervisors & Mixed-Criticality SystemsLearn how ASIL D and QM software safely share one SoC through hardware-assisted virtualization and certified partitioning. From ECU consolidation to freedom from interference, this is the discipline behind modern cockpit, ADAS and zonal controllers.Expert plan pricing12 chapters
In-Vehicle Network SafetyWhat CAN, CAN FD, CAN XL, LIN, FlexRay and automotive Ethernet actually guarantee, the communication failure catalog of ISO 26262-6 Annex D, receiver-driven signal contracts, the black-channel argument, AUTOSAR E2E protection, containment, gateways and the comm matrix as a safety artifact.Expert plan pricing14 chapters
Multi-Core Safety ArchitecturesHow automotive silicon catches its own random hardware faults: lockstep and split-lock cores, safety islands on big SoCs, and hardware and software self-tests. Then how you turn all of it into an ASIL claim with real coverage numbers.Expert plan pricing12 chapters
Power & Clock SupervisionThe two assumptions every other safety mechanism silently depends on: valid supply rails and a trustworthy time base. Power trees, safety PMICs, voltage monitors, sequencing, reset escalation, watchdogs, clock monitors, the independence argument, timing and energy budgets, latent-fault self-test, and the FMEDA rows they all feed.Expert plan pricing14 chapters
Safety Design PatternsLearn proven architectural patterns like redundancy, monitoring, watchdogs, and graceful degradation mapped to ASIL targets. Includes real-world automotive examples from powertrain, chassis, ADAS, and the E-Gas case study.Pro plan pricingExpert plan pricing12 chapters
Safety Element out of Context (SEooC)Learn how to develop reusable safety elements with documented assumptions and guaranteed safety capability. Covers assumption management, integration constraints, safety manuals, and supplier-integrator collaboration workflows.Expert plan pricing
Safety Mechanisms & DiagnosticsLearn mechanism selection from plausibility checks and watchdogs to E2E protection and memory tests. Covers diagnostic coverage calculation, fault detection timing (FDTI), and how mechanisms map to SPFM/LFM metrics.Expert plan pricing14 chapters
2h of videoTechnical Safety ConceptLearn how to translate safety goals and FSC into technical safety requirements (TSRs), system architecture, and HW/SW allocation. Covers safety mechanisms, diagnostic coverage, FMEA integration, and a complete worked example with templates.Expert plan pricing17 chapters
The Hardware-Software Interface (HSI)The HSI is the bilateral contract where ISO 26262 hardware and software meet. Learn to specify registers, allocate diagnostics, budget timing against the FTTI, and run joint reviews so safety mechanisms actually work at the boundary.Expert plan pricing10 chapters
Zonal & Central Compute SafetyWhat consolidation does to a safety concept: zone controllers and central computers, item boundaries across shared platform elements, safety islands and mixed criticality, containment from silicon to street, zone power and eFuses, backbone and gateway failures, monitoring tiers, reset domains, dependent failures, vehicle-level degradation and evidence aggregation.Expert plan pricing13 chapters
Parts 5 and 11
Hardware
Hardware development, the metrics that prove it, and semiconductors.
FMEDA: Quantitative Hardware Safety AnalysisLearn how Failure Modes, Effects and Diagnostic Analysis turns component failure rates in FIT, failure-mode distributions, and diagnostic coverage into the SPFM, LFM, and PMHF metrics that ISO 26262-5 requires for safety-related hardware.Expert plan pricing10 chapters
FPGA SafetyHardware whose circuit is data: configuration upsets and essential bits, scrubbing against the FTTI, TMR in the fabric, HDL discipline, tool confidence, and the FPGA FMEDA that closes the safety case.Expert plan pricing14 chapters
3h 10m of videoHardware MetricsLearn how to calculate SPFM, LFM, and PMHF with correct failure rate data and diagnostic coverage values. Covers ASIL-dependent targets, data sources (IEC 61709, FIDES), common calculation pitfalls, and compliance strategies.Pro plan pricingExpert plan pricing16 chapters
ISO 26262 and SemiconductorsPractical handbook for applying ISO 26262 Part 11 to digital, analog, programmable logic, multi-core SoCs, and sensor silicon. Covers SEooC and DIA for IPs and chips, on-chip safety mechanisms, FMEDA at silicon, DFA at die level, fault injection campaigns, and EDA tool qualification.Expert plan pricing12 chapters
Soft Errors & Transient FaultsA cosmic ray hits a memory cell and your ASIL D function computes with a wrong value. This concept walks from the physics of radiation-induced bit flips through single event effects, ECC and hardened design, all the way to Part 11 quantification.Expert plan pricing12 chapters
Parts 6 and 8
Software
Software process, architecture, coding, tools, platforms and reuse.
Agile Development Methods in ISO 26262Learn how to integrate Scrum and SAFe with ISO 26262 without compromising safety evidence or audit readiness. Covers safety backlogs, ASIL-aware definition of done, sprint-level traceability, and automated verification gates.Pro plan pricingExpert plan pricing12 chapters
1h 15m of videoConfidence in the Use of Software ToolsLearn how to classify tools by TCL (1-3) based on Tool Impact, Tool Error Detection, and ASIL requirements. Covers a 7-chapter structure with qualification methods, practical guidelines, and worked examples for common toolchains.Pro plan pricingExpert plan pricing7 chapters
Functional Safety with AUTOSARAUTOSAR gives the car industry a standard software platform, but a specification cannot be ASIL anything, and a qualified stack does not make your software safe. Learn how the Classic and Adaptive platforms turn ISO 26262-6 requirements into concrete mechanisms: memory partitioning, timing protection, the Watchdog Manager and end-to-end communication protection.Expert plan pricing12 chapters
ISO 26262 and Automotive SPICEOEMs demand an Automotive SPICE capability level and ISO 26262 compliance in the same statement of work, and new teams treat them as two mountains to climb. This concept shows they are one mountain seen from two sides: a shared V-model, one traceability backbone and a single set of work products.Expert plan pricing12 chapters
Linux and Open-Source SafetyBuilding an ISO 26262 safety case for software nobody developed for you: pin down the exact kernel as an element, choose between qualification, proven-in-use and ISO PAS 8926, and guard Linux with external safety mechanisms.Expert plan pricing13 chapters
Model-Based DevelopmentYour ASIL D torque limiter was never typed by a human; a code generator produced it from a Simulink model. Learn how ISO 26262-6 accepts autocoded production C through modeling guidelines, the xIL ladder, back-to-back testing, and a tool confidence argument.Expert plan pricing12 chapters
Product Lines and Variant SafetyKeeping ISO 26262 evidence valid across a family of vehicles: variability models a safety argument can trust, family HARA scope, feature interaction screening, Annex C configuration and calibration data, constraints that make unsafe configurations unbuildable, and a modular safety case.Expert plan pricing13 chapters
Reuse and Legacy Software SafetyHow to argue safety for what you did not develop this time: reuse routes, delta and impact analysis, carryover of unchanged elements, ISO/PAS 8926 qualification, wrappers, assumptions of use, and the rules for reusing verification evidence honestly.Expert plan pricing12 chapters
Software Architectural & Unit DesignLearn architecture patterns for fault isolation, testability, and diagnostic coverage in safety-critical software. Covers modularity, design-by-contract, complexity metrics, and structural coverage requirements per ASIL.Pro plan pricingExpert plan pricing14 chapters
Software Coding GuidelinesLearn how to select and enforce coding standards like MISRA C/C++, CERT C, and AUTOSAR C++ for safety compliance. Covers rule tailoring, static analysis, deviation management, and memory/timing/concurrency safety patterns.Expert plan pricing15 chapters
SW Critical Path & Dependent Failure AnalysisLearn how to identify safety-critical software execution paths and prioritize verification effort where it matters most. Covers control flow analysis, dependent failure analysis (DFA), and strategic placement of safety mechanisms.Expert plan pricing
Part 9
Safety analyses
The inductive, deductive and systemic methods, and when each earns its place.
Dependent Failure Analysis (DFA)Learn how ISO 26262-9 Clause 7 verifies that redundant channels and ASIL decomposition are genuinely independent, by hunting dependent failure initiators and coupling factors that let one root cause defeat several safety elements at once.Expert plan pricing10 chapters
Event Tree AnalysisModel what happens after an initiating event: barriers split the outcome space, sequences get frequencies, and linked fault trees turn accident scenarios into a quantified risk picture for ISO 26262.Expert plan pricing14 chapters
Fault Tree Analysis MasteryLearn top-down fault tree construction using AND/OR gates to quantify how failures combine into hazardous events. Includes an interactive FTA calculator, cut-set analysis, PMHF support, and comparison with FMEA.Expert plan pricing15 chapters
FMEA Mastery for Functional SafetyLearn bottom-up failure mode analysis to identify single-point, residual, and latent faults in your system. Covers scoping, severity/occurrence rating, diagnostic coverage linkage, and integration with SPFM/LFM calculations.Expert plan pricing12 chapters
HAZOP (Hazard and Operability Study) in ISO 26262Learn to think in deviations, not just failures, using guide words applied to a system's design intention to surface hazards a checklist would miss. See how a technique born in the process industry becomes a rigorous, worksheet-driven feeding source for the ISO 26262 HARA.Expert plan pricing14 chapters
Markov Chains AnalysisLearn state-transition modeling for multi-state systems with degradation, repair, and fault tolerance scenarios. Includes an interactive Markov calculator, PMHF validation for redundant architectures, and comparison with FTA/FMEA.Expert plan pricing
Safety AnalysesLearn how HARA, FMEA, FTA, STPA, DFA, and HAZOP complement each other across the ISO 26262 lifecycle. Covers method selection criteria, analysis sequencing, and a guide to choosing the right technique for each risk.Expert plan pricing14 chapters
Testing, fault injection, the safety case, assessment, and life after design release.
Change Impact Analysis for Carryover & Modified SystemsMost automotive projects reuse existing systems. This page shows how ISO 26262 impact analysis and Part 8 Clause 8 change management decide what stays valid, what must be re-verified, and how to keep carryover, variants, and facelifts safe.Expert plan pricing10 chapters
Fault Injection & Safety-Mechanism VerificationProve that safety mechanisms detect and react to faults within the Fault-Tolerant Time Interval, turning FMEDA Diagnostic Coverage claims into demonstrated evidence across hardware, software, simulation, and system-level ISO 26262 campaigns.Expert plan pricing10 chapters
Functional Safety Assessment & AuditLearn how to prepare for and execute independent functional safety assessments per ISO 26262-2. Covers evidence package assembly, assessor qualifications, common non-conformities, and corrective action tracking.Expert plan pricing12 chapters
Goal Structuring Notation (GSN)Learn to turn ISO 26262 work products into an explicit, reviewable safety argument: the six core elements, the SupportedBy and InContextOf relationships, the six-step construction method, modular arguments, and the review practices assessors expect.Expert plan pricing12 chapters
Homologation, Regulations & LiabilityA functionally safe vehicle is not automatically a street-legal one, and an approved vehicle is not automatically liability-proof. Learn how type approval, the key UN Regulations and product liability law interlock with ISO 26262 for E/E and automated driving systems.Expert plan pricing12 chapters
Production, Operation, Service & DecommissioningISO 26262-7 governs the safety lifecycle after design release: production controls, operation and service instructions, field monitoring, repair and diagnostics, and safe end-of-life decommissioning of high-voltage and pyrotechnic systems.Expert plan pricing10 chapters
Proven in UseISO 26262-8 Clause 14 lets you trade development evidence for statistically demonstrated field experience. This concept shows when that trade actually closes and, far more often, why it does not.Expert plan pricing11 chapters
Safety Case DevelopmentLearn how to structure claims, evidence, and arguments using GSN or CAE notation into a living safety case. Covers modular structure, argument patterns, incremental development aligned with sprints, and assessment readiness.Expert plan pricing
Verification & ValidationLearn multi-level verification from unit testing through system and vehicle validation with ASIL-dependent coverage criteria. Covers reviews, HIL/SIL testing, fault injection, MC/DC coverage, and evidence management.Expert plan pricing14 chapters
Applied
Vehicle domains
The same standard applied to brakes, batteries, steering, perception and cameras.
Actuator SafetyMotors, valves and relays are where safety goals become physical - learn how actuation channels fail stuck or runaway, how feedback and diagnostics catch it, and how safe states from de-energize to active hold are engineered and quantified.Expert plan pricing14 chapters
Battery & HV Powertrain SafetyFunctional safety for electric vehicles from cell to wheel: how lithium-ion cells fail, the BMS measurement chain, contactors and HVIL, isolation monitoring, safe torque, charging and thermal runaway - plus the FMEDA and FTTI work behind it.Expert plan pricing14 chapters
Hydrogen Fuel Cell SafetyA fuel you cannot see or smell, stored at 700 bar, converted in a stack that is damaged by careless shutdowns: the FCEV system tour, the two safety worlds of E/E malfunction and physical certification, seven safety goals, sensing and shutoff, a graded reaction ladder, modes and transitions, HV coordination, dependent failures and one worked safety concept.Expert plan pricing14 chapters
Interior and Mirror CamerasThe cameras that face the other way: camera monitor systems that replace mirrors, and interior cameras that watch the driver. A mirror camera rarely fails by going blank - it fails by showing you, convincingly, where things were.Expert plan pricing15 chapters
Inverter and Motor Control SafetyHow a traction inverter earns its ASIL: unintended-torque hazards, Active Short Circuit vs freewheeling safe states, three-level torque monitoring, and the protection layers from gate driver to control software.Expert plan pricing12 chapters
Perception System SafetyPerception treated as a safety-relevant engineered subsystem: the requirements derived from vehicle hazards, the pipeline and fusion architecture behind the environment model, the uncertainty a planner can act on, honest degradation, monitors that know their blind spots, and the evidence that turns all of it into a safety case.Expert plan pricing14 chapters
Steer-by-Wire SafetyWhat happens to functional safety when the steering column disappears: loss-of-steering and self-steering hazards, why steering has no simple safe state, fail-operational dual-lane architectures, torque-feedback integrity, redundant power and communication, and the mechanical-backup trade-off.Expert plan pricing13 chapters
Vehicle Motion Control SafetyBrakes, steering, propulsion, regenerative braking, stability control, torque vectoring and active suspension all push on the same four tire contact patches: motion requests and capability contracts, control allocation, authority and arbitration, dependent failures, fallback distribution, timing and the evidence a coordinated chassis function needs.Expert plan pricing14 chapters
SOTIF, cybersecurity, ML, other industries
Beyond the standard
Where ISO 26262 ends and its neighbours begin.
Aerospace Functional SafetyHow civil aviation makes systems safe when no safe state is reachable in flight: 25.1309 failure conditions and probability targets, the FHA, PSSA and SSA chain, development assurance levels, DO-178C and DO-254, common cause analysis, fly-by-wire architectures and integrated modular avionics, then three honest comparison chapters against ISO 26262.Expert plan pricing15 chapters
Functional Safety in MachineryHow machines that can crush, cut and entangle are engineered so they do not: ISO 12100 risk assessment, PLr and SIL targets, the five ISO 13849 categories, MTTFd, DCavg, CCF and PFHd, safe motion and safe fieldbuses, validation, the CE route, and three chapters comparing the machinery model with ISO 26262.Expert plan pricing15 chapters
Functional Safety in RailwayThe CENELEC world explained for automotive engineers: EN 50126 RAMS, EN 50129 safety cases and SIL, EN 50716 software, EN 50159 safe communication, ETCS and interlocking, plus three chapters comparing the railway risk model honestly against ISO 26262.Expert plan pricing15 chapters
Motorcycle AdaptationLearn ISO 26262-12 adaptations for single-track vehicles including modified controllability and ASIL assessments. Covers motorcycle-specific hazards, rider factors, and tailored requirements for ABS, traction control, and suspension.Expert plan pricing
Safety & Cybersecurity Co-EngineeringHow ISO 26262 functional safety and ISO/SAE 21434 cybersecurity engineering work together on connected vehicles: aligning HARA with TARA, sharing work products, resolving safety-versus-security conflicts, and satisfying UNECE R155 and R156 type approval.Expert plan pricing10 chapters
Safety-Aware Machine Learning (ISO 8800)Engineer AI and ML components that survive a safety case. Learn the ISO/PAS 8800:2024 lifecycle on top of ISO 26262 and ISO 21448, covering dataset coverage, robustness, runtime monitoring, and assurance arguments.Expert plan pricing11 chapters
SotIF for the Functional Safety EngineerA FuSi-engineer manual for extending HARA, FSC, TSC, FMEDA, and the safety case into ISO 21448 (SotIF), ISO/PAS 8800, and ISO/IEC TR 5469. Deeply technical with worked examples on triggering conditions, acceptance criteria, and field monitoring.Pro plan pricingExpert plan pricing12 chapters
Trucks & Buses AdaptationHow ISO 26262:2018 extended functional safety to trucks, buses, trailers and semi-trailers. Covers the normative Clause 6.4.5 on managing variances, multi-stage manufacturing interfaces, heavy-vehicle hazards and worst-case ASIL determination across the affected parts of the standard.Expert plan pricing12 chapters
01 / Quick answers
Four ISO 26262 terms, in short.
The questions engineers ask most often about the concept phase and safety analyses. Each guide then works through the topic in full.
A one-minute explanation02 / 03
HARA. FSC. TSC. How do they connect?
One braking example. Choose a step.
Maintain vehicle stability
What must the function do?
The Functional Safety Concept turns safety goals into functional requirements: safe states, fault reactions and the behaviour needed to stay safe.
In the braking example
Specify the required response to unintended braking to maintain vehicle stability.
This is the connection. The guides walk you through the detail.
Concept phase
What is HARA?
Hazard analysis and risk assessment rates each hazardous event for severity, exposure and controllability. Together they give an ASIL from A to D, or QM, and every event rated A to D gets a safety goal. In the concept phase it follows the item definition (ISO 26262-3:2018, Clause 6), and every later safety requirement traces back to its safety goals.
You split a safety requirement across redundant elements that are sufficiently independent, so each one can be developed to a lower ASIL. A typical case is an ASIL D requirement split into two ASIL B(D) requirements. The allowed combinations are in ISO 26262-9:2018, Clause 5. The split only holds if a dependent failure analysis shows enough independence between the elements.
The functional safety concept says what the item must do to stay safe. It turns the safety goals into functional safety requirements (ISO 26262-3:2018, Clause 7). The technical safety concept says how the system does it. It turns those requirements into technical safety requirements and allocates them to hardware and software (ISO 26262-4:2018, Clause 6).
FMEA works bottom up. It starts from the failure modes of each component and follows their effects on the system. FTA works top down. It starts from one unwanted event and finds the combinations of faults that cause it. For the system architecture, ISO 26262-4:2018, Clause 6.4 highly recommends an inductive analysis such as FMEA at every ASIL, and a deductive analysis such as FTA for ASIL C and D.
The format, the free account, and what your subscription unlocks.
What exactly is a concept guide?
A focused, self-paced course on one functional safety topic. You work through structured chapters, explanations, diagrams and automotive examples. The guides help you understand the reasoning and connect it to practical work. They complement the ISO 26262 standard.
What can I see before I pay?
You can read the public guide overviews without an account. Register free to open the complete Functional Safety Concept guide: 13 chapters, interactive diagrams and its two-hour video course. No credit card is required.
What is the difference between Pro and Expert?
Pro includes 14 released guides in total, including the free FSC guide, HARA, ASIL decomposition and hardware metrics. Expert includes all 83 released guides, adding topics such as TSC, FMEA, FTA and safety mechanisms. Each guide shows every plan that includes it. Pricing lists the other tools and resources included in each plan.
Does every guide have a video course?
Video courses are available for HARA, Functional Safety Concept, Technical Safety Concept, ASIL decomposition, hardware metrics and tool confidence. The other guides use written chapters, diagrams and examples. Video runtimes are shown where a course is available.
Can this help me prepare for an exam or a project?
Use the guides to build understanding, revise a topic or work through a project question. The platform also offers practice exams, work product templates and simulators; access depends on your plan. Certification requirements are set by the relevant certification provider.
Are guides in preparation included in the advertised total?
The 83-guide total counts released guides. You can choose to include guides in preparation when browsing the library; those entries are explicitly labelled and are not promised as available subscription content.
Your first connection starts here
Make your next safety topic click.
Open the free Functional Safety Concept guide and start connecting the ideas.